Quote:

"No workstation will log onto our enterprise network without being fully patched. Ever. Period."



Hmmm... somehow I doubt that. It's Monday and 1,200 machines logon - all patched. It's now Tuesday and Microsoft/Oracle/WinZip/Citrix have all issued numerous CRITICAL patches that allow any user to easily gain FULL access to an infected system.

I seriously doubt you have any method in place to KNOW and PREVENT all 1,200 systems from logging in.

You might be able to patch them that day or the next day, but that is not the same as your statement.


Sounds like you have it working though how you like in general, but don't forget that Glenn Barnas also posted some advanced scripts to work with WSUS and manage many of the shortcomings using KiXtart.